no-invent + per-tenant chips

app/models.py

@@ -92,6 +92,9 @@ class Tenant(Base):
     # What the web embed shows: "chat" (AI panel), "whatsapp" (direct wa.me
     # button) or "both" (consumer chooses). Per-tenant.
     widget_mode: Mapped[str] = mapped_column(String(16), default="chat")
+    # Quick-reply starter chips shown in the widget — per tenant, since a store
+    # selling services needs different ones than one selling products.
+    starters: Mapped[list] = mapped_column(JSON, default=list)
     # Where this store's "talk to a human" leads are emailed (per-client inbox).
     support_email: Mapped[str] = mapped_column(String(320), default="")
     # Secret that lets this store log into its OWN client portal (sees only its

app/orchestrator.py

@@ -20,11 +20,16 @@ log = logging.getLogger(__name__)
 
 HISTORY_LIMIT = 10
 MAX_TOOL_ITERS = 6
-# Catalog-intent: "what do you sell / what products / catálogo / qué ofrecéis…"
-_CATALOG_INTENT = re.compile(
-    r"\b(qu[eé]\s+(vend|produc|ofrec|ten[eé]is|hay|art[ií]culo)|"
-    r"what\s+(do\s+you\s+sell|products|can\s+i\s+buy)|cat[aá]log|catalog|"
-    r"productos?\b|qu[eé]\s+puedo\s+comprar|do\s+you\s+sell)",
+# Questions about the business/identity/catalog/recommendation where weak models
+# tend to INVENT a fake store. We force a grounded (tool-based) answer for these.
+_GROUND_INTENT = re.compile(
+    r"(qu[eé]\s+(vend|produc|ofrec|servici|ten[eé]is|hac[eé]is|hay|art[ií]culo)|"
+    r"de\s+qu[eé]\s+(va|trata|sois)|qu[eé]\s+es\s+(esto|esta|este|la\s+(p[aá]gina|web|empresa|tienda))|"
+    r"a\s+qu[eé]\s+(os\s+|te\s+)?dedic|qui[eé]n(es)?\s+sois|sobre\s+(vosotros|nosotros|la\s+empresa)|"
+    r"ay[uú]dame\s+a\s+elegir|recomi[eé]nd|qu[eé]\s+me\s+recomiend|qu[eé]\s+puedo\s+comprar|"
+    r"cat[aá]log|catalog|productos?\b|servicios?\b|"
+    r"what\s+(do\s+you\s+(sell|do|offer)|is\s+this|are\s+you|services|products)|"
+    r"who\s+are\s+you|about\s+(you|us)|help\s+me\s+choose|do\s+you\s+sell)",
     re.IGNORECASE,
 )
 MAX_REPLY_TOKENS = 1000  # bound output; high enough for verbose scripts (ar/th/hi)
@@ -72,16 +77,17 @@ async def run_turn(
     language = detect_language(user_message)
     system_prompt = build_system_prompt(brand_name, language, channel=ctx.channel)
     messages: list[dict[str, Any]] = [{"role": "system", "content": system_prompt}]
-    # Deterministic anti-hallucination: when the customer asks what the store
-    # sells/offers, weak providers tend to invent a catalog from memory. Force a
-    # grounded answer by requiring a tool call first.
-    if _CATALOG_INTENT.search(user_message):
+    # Deterministic anti-hallucination: asked what the business is/sells/offers
+    # or to recommend, weak providers invent a fake store from memory. Force a
+    # grounded answer by requiring a tool lookup first.
+    if _GROUND_INTENT.search(user_message):
         messages.append({"role": "system", "content": (
-            "Para esta pregunta sobre productos/catálogo DEBES llamar primero a "
-            "search_products y, si no hay catálogo en vivo o no devuelve nada, a "
-            "search_knowledge. Responde SOLO con lo que devuelvan. Si ninguna "
-            "tiene la respuesta, dilo con sinceridad. PROHIBIDO describir productos "
-            "o categorías de memoria."
+            "Para esta pregunta sobre la empresa/tienda/productos/servicios DEBES "
+            "llamar primero a search_knowledge (y a search_products si hay catálogo) "
+            "ANTES de responder. Describe el negocio, lo que vende o lo que ofrece "
+            "SOLO con lo que devuelvan las herramientas. Si no hay información, dilo "
+            "con sinceridad y ofrece ayuda. PROHIBIDO inventar el nombre del negocio, "
+            "qué es, qué vende, categorías o productos."
         )})
     for m in prior:
         if m.role in ("user", "assistant"):

app/portal_ui/index.html

@@ -114,6 +114,9 @@
           <option value="whatsapp">Solo un botón de WhatsApp</option>
           <option value="both">Las dos cosas (el visitante elige)</option>
         </select>
+        <label>Botones rápidos del chat (máx. 4, separados por coma)</label>
+        <input id="b-starters" placeholder="¿Qué ofrecéis?, Pedir presupuesto, Hablar con una persona" />
+        <p class="muted">Son los atajos que verá el visitante al abrir el chat. Pon los que encajen con TU negocio (productos, servicios, etc.). Si lo dejas vacío, se ponen unos genéricos.</p>
         <div class="row" style="margin-top:14px;"><button onclick="saveBusiness()">Guardar</button><span id="biz-state" class="ok"></span></div>
       </div>
     </section>
@@ -225,6 +228,7 @@
     $("b-avatar").value = c.avatar_url || "";
     $("b-email").value = c.support_email || "";
     $("b-mode").value = c.widget_mode || "chat";
+    $("b-starters").value = (c.starters || []).join(", ");
     syncColorPick();
     $("sh-shop").value = c.shopify_shop || "";
     $("sh-id").value = c.shopify_client_id || "";
@@ -266,10 +270,11 @@
     else { var e = await r.json().catch(function(){return {};}); if(stateId) $(stateId).textContent = "Error: " + (e.detail || "no se pudo guardar"); }
   }
   function saveBusiness(){
+    var starters = $("b-starters").value.split(",").map(function(s){return s.trim();}).filter(Boolean).slice(0,4);
     putConfig({ assistant_name: $("b-assistant").value.trim(), brand_name: $("b-brand").value.trim(),
       brand_color: $("b-color").value.trim(), welcome: $("b-welcome").value.trim(),
       avatar_url: $("b-avatar").value.trim(), support_email: $("b-email").value.trim(),
-      widget_mode: $("b-mode").value }, "biz-state");
+      widget_mode: $("b-mode").value, starters: starters }, "biz-state");
   }
   function saveShopify(){
     var body = { shopify_shop: $("sh-shop").value.trim(), shopify_client_id: $("sh-id").value.trim() };

app/prompts.py

@@ -22,8 +22,9 @@ SYSTEM_TEMPLATE = """You are {brand_name}, the customer-support and sales assist
 - You CAN use everyday general knowledge for small talk and trivial questions. The ONLY hard limit is the grounding rule below: never invent THIS STORE's products, prices, stock, specs, policies or order data — those come from tools.
 
 # GROUNDING (most important)
-- For anything about this store — products, prices, stock, specs, shipping, returns, policies, orders — answer ONLY with facts returned by your tools. Never use memory or general knowledge for those.
-- If a tool returns nothing useful, OR your tools are unavailable, say so plainly (in the customer's language) and offer to connect them with a person. NEVER invent a product, price, spec or a catalog — inventing is a serious error.
+- For anything about this store — what the business IS, what it sells or does, products, prices, stock, specs, shipping, returns, policies, orders — answer ONLY with facts returned by your tools. Never use memory or general knowledge for those.
+- NEVER invent the store's name, what it sells, or product/service categories. If asked "what is this / what do you sell / help me choose" and you have no tool result, do NOT guess a business — search first; if there's still nothing, say honestly you don't have that info yet and offer to connect a person. Making up a business or catalog is a serious error.
+- If a tool returns nothing useful, OR your tools are unavailable, say so plainly (in the customer's language) and offer to connect them with a person.
 - Don't repeat the same search. As soon as you have the info, answer.
 
 # TOOL ROUTING (choose by intent — do not guess)

app/routes/portal.py

@@ -38,6 +38,7 @@ class PortalConfigIn(BaseModel):
     assistant_name: str | None = None
     avatar_url: str | None = None
     widget_mode: str | None = None
+    starters: list[str] | None = None
     support_email: str | None = None
     shopify_shop: ShopDomain = None
     shopify_client_id: str | None = None
@@ -86,6 +87,7 @@ def _config(tenant: Tenant) -> dict:
         "assistant_name": tenant.assistant_name,
         "avatar_url": tenant.avatar_url,
         "widget_mode": tenant.widget_mode or "chat",
+        "starters": tenant.starters or [],
         "support_email": tenant.support_email,
         "shopify_shop": tenant.shopify_shop,
         "shopify_client_id": tenant.shopify_client_id,

app/routes/widget.py

@@ -12,7 +12,7 @@ from __future__ import annotations
 import re
 from pathlib import Path
 
-from fastapi import APIRouter, Depends
+from fastapi import APIRouter, Depends, Response
 from fastapi.responses import FileResponse, HTMLResponse
 from sqlalchemy.ext.asyncio import AsyncSession
 
@@ -100,8 +100,10 @@ async def preview(
 
 @router.get("/widget-config")
 async def widget_config(
-    t: str = DEFAULT_SLUG, db: AsyncSession = Depends(get_session)
-) -> dict[str, str]:
+    response: Response, t: str = DEFAULT_SLUG, db: AsyncSession = Depends(get_session)
+) -> dict:
+    # Never cache: a store's branding/mode/starter changes must show on next load.
+    response.headers["Cache-Control"] = "no-store, max-age=0"
     tenant = await get_tenant_by_slug(db, t)
     if tenant is None:
         return {
@@ -112,6 +114,7 @@ async def widget_config(
             "avatar_url": "",
             "whatsapp_number": "",
             "widget_mode": "chat",
+            "starters": [],
         }
     return {
         "brand_name": tenant.brand_name,
@@ -121,4 +124,5 @@ async def widget_config(
         "avatar_url": tenant.avatar_url,
         "whatsapp_number": tenant.whatsapp_number,
         "widget_mode": tenant.widget_mode or "chat",
+        "starters": tenant.starters or [],
     }

app/static/widget.js

@@ -211,8 +211,11 @@
     function userMsg(t) { row("user").textContent = t; msgs.scrollTop = msgs.scrollHeight; }
     function typing() { var b = row("bot"); b.classList.add("ssb-typing"); b.innerHTML = "<span></span><span></span><span></span>"; msgs.scrollTop = msgs.scrollHeight; return b; }
 
-    // Suggested starter chips, incl. a guided recommender entry point.
-    var STARTERS = ["Ayúdame a elegir", "¿Dónde está mi pedido?", "Ver productos"];
+    // Suggested starter chips — per tenant (a services store needs different
+    // ones than a products store). Falls back to neutral, non-ecommerce chips.
+    var STARTERS = (cfg.starters && cfg.starters.length)
+      ? cfg.starters.slice(0, 4)
+      : ["¿Qué ofrecéis?", "Quiero más información", "Hablar con una persona"];
     function renderStarters() {
       var wrap = document.createElement("div"); wrap.className = "ssb-chips";
       STARTERS.forEach(function (s) {

app/tenancy.py

@@ -58,6 +58,7 @@ _TENANT_FIELDS = {
     "whatsapp_number",
     "support_email",
     "widget_mode",
+    "starters",
 }
 
 

migrations/versions/0013_tenant_starters.py

@@ -0,0 +1,29 @@
+"""Per-tenant widget starter chips
+
+Revision ID: 0013_tenant_starters
+Revises: 0012_source_urls
+Create Date: 2026-06-10
+
+Additive, Postgres-guarded. Tests use create_all.
+"""
+
+from __future__ import annotations
+
+from alembic import op
+
+revision = "0013_tenant_starters"
+down_revision = "0012_source_urls"
+branch_labels = None
+depends_on = None
+
+
+def upgrade() -> None:
+    if op.get_bind().dialect.name != "postgresql":
+        return
+    op.execute("ALTER TABLE tenants ADD COLUMN IF NOT EXISTS starters JSONB NOT NULL DEFAULT '[]'::jsonb")
+
+
+def downgrade() -> None:
+    if op.get_bind().dialect.name != "postgresql":
+        return
+    op.execute("ALTER TABLE tenants DROP COLUMN IF EXISTS starters")

tests/routes/test_portal.py

@@ -150,6 +150,20 @@ async def test_portal_client_configures_own_business_and_shopify(app_client, db_
     assert g["brand_name"] == "Mi Marca" and g["support_email"] == "dueno@x.com"
 
 
+async def test_portal_sets_starters_and_widget_config_serves_them(app_client, db_session):
+    _app, client = app_client
+    a, tok = await _tenant_with_token(db_session, "chips")
+    await db_session.commit()
+    hdr = {"Authorization": "Bearer " + tok}
+    r = await client.put("/portal/api/config", headers=hdr,
+                         json={"starters": ["Pedir presupuesto", "Ver servicios", "Hablar con alguien"]})
+    assert r.status_code == 200
+    assert r.json()["starters"] == ["Pedir presupuesto", "Ver servicios", "Hablar con alguien"]
+    # the widget config endpoint serves the tenant's own chips
+    wc = (await client.get("/widget-config?t=chips")).json()
+    assert wc["starters"] == ["Pedir presupuesto", "Ver servicios", "Hablar con alguien"]
+
+
 async def test_portal_config_is_isolated_per_tenant(app_client, db_session):
     _app, client = app_client
     a, a_tok = await _tenant_with_token(db_session, "ca")

tests/test_phase_bc.py

@@ -36,5 +36,5 @@ def test_widget_has_proactive_and_starters():
     js = (ROOT / "app" / "static" / "widget.js").read_text()
     assert "ssb-bubble" in js          # proactive nudge
     assert "renderStarters" in js      # guided starter chips
-    assert "Ayúdame a elegir" in js   # recommender entry point
+    assert "cfg.starters" in js        # chips are per-tenant (not hardcoded)
     assert "sendText" in js            # chips reuse the send path